[OpenIndiana-discuss] [HEADSUP] serious security issue in sysding

[Alexander Pyhalov]

On 12/23/2015 15:47, Jim Klimov wrote:
> 23 декабря 2015 г. 4:29:16 CET, Lou Picciano <loupicciano at comcast.net> пишет:

>> If it wasn't set, it is set to 'NP'. This is necessary for zlogin to work correctly.
>
> Why is that? Who is 'zlogin -S' for? ;) e.g. zone shutdown scripts use it for low-level access, and zone-installer maybe too...
>

I'd prefer this, I wouldn't like to tell everyone: now you have to use 
"zlogin -S". OmniOS used another approach - they ser root password to 
some hardcoded hash on zone creation. Perhaps it's even better.
-- 
Best regards,
Alexander Pyhalov,
system administrator of Southern Federal University IT department